Описание
Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до a13 (исключая)
Одновременно
cpe:2.3:o:dell:inspiron_7347_bios:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7347:-:*:*:*:*:*:*:*
EPSS
Процентиль: 14%
0.00046
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-416
CWE-416
Связанные уязвимости
github
больше 3 лет назад
Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
EPSS
Процентиль: 14%
0.00046
Низкий
6.8 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-416
CWE-416